Open hats-bug-reporter[bot] opened 1 year ago
Hello, Thanks a lot for your attention. We are using "isReversed" for all the type pools to save gas on parameters, so it's a normal behaviour. Also, we test our parameters before deployment to see if the price is computed correctly. If a wrong computation occurs even if we have deployed the bond, we can change the parameters to correct the shoot, so it's not a real problem. In conclusion we have so to consider this issue as invalid.
Github username: @justefg Submission hash (on-chain): 0x2b04b4bdabd8811a4a59de320708018cb716d18bfc19181d095dc5e4765fda80 Severity: low
Description: Description\ Consider a pool USDT-WBTC-ETH https://curve.fi/#/ethereum/pools/tricrypto2/deposit
When calculating price for WBTC and ETH
isReversed
should be false for both of them since base token is USDT. However, this doesn't work and the parameter should be set to true for WBTC for correct value to be fetched.Attack Scenario\
Attachments